Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          n7TBvAV/5SaCtk/hXXQr2moP4tahI/2C7NA+j2aDg2c=
Subject key identifier:   24:81:E5:BE:8F:16:AB:90:7E:F9:1D:D6:2D:22:91:3E:EC:18:87:A3
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       01A10248CA036AC6F135EBAEEF834300677C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          FF
Signing time:             Sat 03 Oct 2026 15:01:26 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:26 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:26 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: 8yNNH32qDnXMCsOS7NQDmv6FTY+D2VGjAonTBVsWfT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:48:ca:03:6a:c6:f1:35:eb:ae:ef:83:43:00:67:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Oct  3 15:01:26 2026 GMT
            Not After : Oct  4 15:01:26 2026 GMT
        Subject: CN=2481e5be8f16ab907ef91dd62d22913eec1887a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:ba:a6:5f:ca:aa:58:89:6c:e1:16:1d:cb:
                    b8:53:b8:21:19:2f:ff:89:35:5a:95:9b:f7:83:dd:
                    c6:b8:bc:4a:28:65:ce:cc:fb:8e:a1:72:d0:74:f0:
                    71:83:8a:5c:a5:20:b2:c6:32:36:41:ed:45:dc:87:
                    42:86:7e:f6:10:3f:d0:18:a8:d3:08:06:44:83:45:
                    b9:49:ff:40:5c:bb:15:30:40:cf:a0:88:86:6c:48:
                    62:d5:9a:79:59:f4:5e:d4:cc:f6:fc:f2:06:21:c7:
                    58:93:8d:40:dc:95:50:ae:bb:d7:53:55:10:ef:3b:
                    d2:a9:26:90:f9:04:a0:40:62:0d:e0:0f:e0:56:db:
                    3f:99:b7:d1:00:79:a8:0e:3d:b9:80:f2:d7:a0:44:
                    b0:a9:12:5f:27:55:4e:29:9c:20:ba:e2:3a:b0:7c:
                    dc:f2:1c:f9:29:65:a7:2d:5f:ce:7c:23:61:0e:56:
                    d1:85:7c:19:26:54:15:63:86:58:79:c7:f9:2a:13:
                    1d:20:a0:04:7b:5b:ff:54:83:b8:47:e1:8d:0c:99:
                    87:e1:8e:ea:6f:63:e5:de:67:f5:86:90:7c:36:63:
                    4f:dc:e5:5d:49:5e:0e:a5:15:dd:0a:1f:dc:49:e2:
                    8e:52:8f:23:ca:fc:1b:fe:12:e9:cd:88:91:f8:96:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:81:E5:BE:8F:16:AB:90:7E:F9:1D:D6:2D:22:91:3E:EC:18:87:A3
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:a2:53:58:26:89:f8:4f:79:a8:a4:9a:79:bd:2c:0a:1f:
         22:e1:71:53:98:1a:96:d1:d6:81:9b:cc:35:29:17:2c:24:58:
         33:fc:0f:27:4d:2e:17:b7:a8:43:64:64:94:ff:7f:a5:31:27:
         76:ce:5b:11:87:8b:27:a6:f5:a7:88:66:14:40:ac:08:a5:2d:
         a6:0e:33:02:24:d5:21:ba:ef:19:a3:ae:0d:df:01:a9:75:f7:
         d8:c8:97:e1:fa:ac:cd:ab:75:86:50:22:e9:ee:27:f6:20:71:
         95:33:22:c1:06:f6:8d:d4:4c:7d:b8:f9:10:b6:c6:67:7e:95:
         37:3a:b5:d3:11:6f:d1:2d:d6:45:d1:43:6f:9c:46:0c:87:62:
         ef:00:f2:dd:bd:0c:02:95:0e:f1:41:c4:63:d0:e1:49:16:07:
         82:dd:28:5e:8f:2d:4f:f6:85:cd:f2:05:8e:ef:bb:d5:07:7a:
         98:ce:00:64:da:9f:66:d4:07:49:2c:5a:19:63:f7:58:6c:c0:
         4e:60:04:e9:b0:13:ff:3e:d7:79:2d:3f:01:7e:52:6f:c2:0c:
         f5:b2:60:7c:1c:a7:16:ba:2e:3c:f9:c2:9f:c8:e1:6e:60:a9:
         de:9e:28:34:5b:f1:91:7f:1a:fb:c2:72:c7:cd:9f:32:98:b3:
         fd:21:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 03:15:32 2026 by rpki-client